Lucene search

K
ibmIBM9FFDFB54E44522CD84C40BBA459137D1309CEEA5B8584327B536848DE4912ECE
HistoryAug 31, 2020 - 9:03 a.m.

Security Bulletin: CVE-2020-2654 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

2020-08-3109:03:34
www.ibm.com
17
cve-2020-2654
ibm sdk
java technology
content collector
email
file systems
microsoft sharepoint
ibm connections
vulnerability
denial of service
interim fix

EPSS

0.001

Percentile

28.7%

Summary

CVE-2020-2654 was disclosed as part of the Oracle January 2020 Critical Patch Update.

Vulnerability Details

CVEID:CVE-2020-2654
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/174601 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
Content Collector for IBM Connections 4.0.1

Remediation/Fixes

Product VRM Remediation
Content Collector for Email 4.0.1 Use Content Collector for Email 4.0.1.10 Interim Fix IF010
Content Collector for File Systems 4.0.1 Use Content Collector for File Systems 4.0.1.10 Interim Fix IF010
Content Collector for Microsoft SharePoint 4.0.1 Use Content Collector for Microsoft SharePoint 4.0.1.10 Interim Fix IF010
Content Collector for IBM Connections 4.0.1 Use Content Collector for IBM Connections 4.0.1.10 Interim Fix IF010

Workarounds and Mitigations

None